Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13071 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
WordPress Plugin WordPress Download Manager Security Bypass (2.7.2)
CVE-2014-9260
CWE-264
High
WordPress Plugin WordPress Landing Pages SQL Injection (1.2.1)
CVE-2013-6243
CWE-89
High
WordPress Plugin WordPress Leads Cross-Site Scripting (1.6.2)
-
CWE-79
High
WordPress Plugin WordPress Photo Gallery by Gallery Bank SQL Injection (3.0.101)
-
CWE-89
High
WordPress Plugin WordPress Poll Cross-Site Request Forgery (34.05)
-
CWE-352
High
WordPress Plugin WordPress Poll Multiple SQL Injection Vulnerabilities (33.5)
-
CWE-89
High
WordPress Plugin WordPress Poll Multiple Unspecified Vulnerabilities (35.0)
-
-
High
WordPress Plugin WordPress Related Posts Cross-Site Request Forgery (2.6.1)
CVE-2013-3476
CWE-352
High
WordPress Plugin WordPress Sentinel Multiple Vulnerabilities (1.0.0)
CVE-2011-5226
CWE-352
High
WordPress Plugin WordPress Simple Shopping Cart Cross-Site Request Forgery (3.5)
CVE-2013-2705
CWE-352
High
WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.0)
CVE-2013-3478
CWE-89
High
WordPress Plugin WordPress Video Player Multiple Vulnerabilities (1.5.4)
-
CWE-352
High
WordPress Plugin WP-DownloadManager Cross-Site Request Forgery (1.60)
CVE-2013-2697
CWE-352
High
WordPress Plugin WP e-Commerce Predictive Search Cross-Site Scripting (1.1.1)
-
CWE-79
High
WordPress Plugin WP e-Commerce Shop Styling Remote File Inclusion (1.7.2)
CVE-2013-0724
CWE-94
High
WordPress Plugin WP-Filebase Download Manager Multiple Unspecified Vulnerabilities (0.2.9.24)
-
-
High
WordPress Plugin WP-Forum SQL Injection (2.4)
-
CWE-89
High
WordPress Plugin WP Front-End Repository Manager Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Wp-ImageZoom SQL Injection (1.0.7)
-
CWE-89
High
WordPress Plugin WP Marketplace-Complete Shopping Cart/eCommerce Solution Arbitrary File Download (2.4.0)
CVE-2014-9014
CWE-22
High
WordPress Plugin WP Marketplace-Complete Shopping Cart/eCommerce Solution Arbitrary File Upload (1.2.1)
-
CWE-434
High
WordPress Plugin WP Media Cleaner Multiple Cross-Site Scripting Vulnerabilities (2.2.6)
CVE-2015-2195
CWE-79
High
WordPress Plugin WP Photo Album Plus Cross-Site Scripting (5.0.2)
CVE-2013-3254
CWE-79
High
WordPress Plugin WP Photo Album Plus Cross-Site Scripting (4.9.2)
-
CWE-79
High
WordPress Plugin WP PHP widget Information Disclosure (1.0.2)
CVE-2013-0721
CWE-200
High
WordPress Plugin WP-Polls SQL Injection (2.61)
-
CWE-89
High
WordPress Plugin WP-PostViews Cross-Site Request Forgery (1.62)
CVE-2013-3252
CWE-352
High
WordPress Plugin WP-Print Cross-Site Request Forgery (2.51)
CVE-2013-2693
CWE-352
High
WordPress Plugin WP Print Friendly Security Bypass (0.5.2)
-
CWE-264
High
WordPress Plugin WP-reCAPTCHA Cross-Site Scripting (3.1.3)
-
CWE-79
High
WordPress Plugin WP-RecentComments SQL Injection (2.0.7)
CVE-2012-1067
CWE-89
High
WordPress Plugin WP Simple Login Registration Cross-Site Scripting (1.0.2)
-
CWE-79
High
WordPress Plugin WP Super Cache Cross-Site Scripting (1.3)
-
CWE-79
High
WordPress Plugin WP Super Cache Cross-Site Scripting (1.4)
-
CWE-79
High
WordPress Plugin wp superb Slideshow Information Disclosure (2.4)
-
CWE-200
High
WordPress Plugin WP Symposium Cross-Site Scripting (13.02)
CVE-2013-2695
CWE-79
High
WordPress Plugin WP Symposium Open Redirect (13.04)
CVE-2013-2694
CWE-601
High
WordPress Plugin WP125 Cross-Site Request Forgery (1.4.9)
CVE-2013-2700
CWE-352
High
WordPress Plugin WP125 Multiple Cross-Site Scripting Vulnerabilities (1.4.4)
-
CWE-79
High
WordPress Plugin WPML (WordPress Multilingual) Multiple Vulnerabilities (3.1.8.6)
CVE-2015-2792
CWE-284
High
WordPress Plugin WPshop-eCommerce Arbitrary File Upload (1.3.9.5)
-
CWE-434
High
WordPress Plugin WPtouch Multiple Cross-Site Scripting Vulnerabilities (3.7.3)
-
CWE-79
High
WordPress Plugin Xhanch-My Twitter Cross-Site Request Forgery (2.7.6)
CVE-2013-3253
CWE-352
High
WordPress Plugin Yet Another Photoblog Unspecified Vulnerability (1.10.6)
-
-
High
WordPress Plugin Yoast SEO Security Bypass (1.4.6)
-
CWE-264
High
WordPress Plugin Yoast SEO SQL Injection (1.7.3.3)
CVE-2015-2292
CWE-89
High
WordPress Plugin yolink Search for WordPress Cross-Site Scripting (2.5)
-
CWE-79
High
WordPress Plugin Zingiri Web Shop Unspecified Vulnerability (2.6.5)
-
-
High
WordPress Plugin Ad-Manager Open Redirect (1.1.2)
CVE-2014-8754
CWE-601
High
WordPress Plugin Add Link to Facebook Multiple Cross-Site Scripting Vulnerabilities (1.215)
-
CWE-79
High
WordPress Plugin Aesop Story Engine Cross-Site Scripting (1.6)
-
CWE-79
High
WordPress Plugin Ajax Search Lite Remote Command Execution (3.1)
-
CWE-95
High
WordPress Plugin Ajax Store Locator SQL Injection (1.2.0)
-
CWE-89
High
WordPress Plugin Akeeba Backup CORE for WordPress Arbitrary File Upload (1.1.3)
CVE-2014-7228
-
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (3.8.9)
CVE-2015-0895
CWE-352
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Scripting (3.9.4)
-
CWE-79
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall SQL Injection (3.8.7)
CVE-2015-0894
CWE-89
High
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall SQL Injection (3.9.0)
-
CWE-89
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.2.6.1)
-
CWE-79
High
WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Information Disclosure (2.2.5.1)
CVE-2015-0902
CWE-200
High
WordPress Plugin All-in-One WP Migration Security Bypass (2.0.4)
-
CWE-264
High
WordPress Plugin Another WordPress Classifieds Arbitrary File Upload (3.3.2)
-
CWE-434
High
WordPress Plugin Another WordPress Classifieds Multiple Vulnerabilities (2.2.1)
CVE-2014-10013
CWE-89
High
WordPress Plugin Another WordPress Classifieds Unspecified Vulnerability (1.8.9.4)
CVE-2012-4874
-
High
WordPress Plugin AppPresser-Mobile App Framework Cross-Site Scripting (1.1.4)
-
CWE-79
High
WordPress Plugin bbPress Cross-Site Scripting (2.5.6)
-
CWE-79
High
WordPress Plugin Bilingual Linker Cross-Site Scripting (2.1.1)
-
CWE-79
High
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.10.4)
-
CWE-79
High
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.10.5)
-
CWE-79
High
WordPress Plugin BuddyDrive Cross-Site Scripting (1.2.2)
-
CWE-79
High
WordPress Plugin BuddyPress Cross-Site Scripting (2.2.2.1)
-
CWE-79
High
WordPress Plugin Captcha by BestWebSoft Security Bypass (4.0.6)
CVE-2014-9283
CWE-254
High
WordPress Plugin Cart66 Pro Arbitrary File Disclosure (1.5.3)
CVE-2014-9461
CWE-22
High
WordPress Plugin Citizen Space Cross-Site Scripting (1.1)
-
CWE-79
High
WordPress Plugin Client Invoicing by Sprout Invoices-Easy Estimates and Invoices for WordPress Cross-Site Scripting (6.1)
-
CWE-79
High